
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
File: 644F9AE827627B0357D7972FE08D569A0CB97C31.mft (raw, json)
Hash identifier: yJYsXIuBN6P44Df39en52R6TnHG1V2DUgo3lZ9ouiyk=
Subject key identifier: 24:CF:EA:EF:C4:08:68:0D:06:62:C3:9F:DD:99:F8:CD:31:10:61:73
Authority key identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31
Certificate issuer: /CN=644F9AE827627B0357D7972FE08D569A0CB97C31
Certificate serial: 1AC603FA2575FCA67A62A677DE887276157F3666
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
Manifest number: A6
Signing time: Tue 13 Oct 2026 19:03:13 +0000
Manifest this update: Tue 13 Oct 2026 18:58:13 +0000
Manifest next update: Fri 16 Oct 2026 23:43:13 +0000
Files and hashes: 1: 644F9AE827627B0357D7972FE08D569A0CB97C31.crl (hash: iicrVfbabvkDFo5XtNsPqQjCkKoqXRNQZiPsqnOJ19s=)
2: 323430303a616530303a313938313a3a2f34382d3438203d3e203338333637.roa (hash: QKXGlT0gawntujhSrweVLVCzEtXKFPE949OqugYMNTI=)
3: 3131392e33382e3139322e302f32302d3230203d3e203338333637.roa (hash: niXTpol86vmz6DcPKGxvQoGJAvpzazIgo8KhQW4C54k=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl
rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 23:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c6:03:fa:25:75:fc:a6:7a:62:a6:77:de:88:72:76:15:7f:36:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644F9AE827627B0357D7972FE08D569A0CB97C31
Validity
Not Before: Oct 13 18:58:13 2026 GMT
Not After : Oct 16 23:43:13 2026 GMT
Subject: CN=24CFEAEFC408680D0662C39FDD99F8CD31106173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:c4:e0:19:e5:b0:20:3d:d2:00:45:91:52:
0e:e6:e0:2b:ce:27:85:bf:2c:6e:a2:75:c1:c0:2a:
bb:c1:39:80:3c:25:3b:12:84:41:e0:d9:17:53:a6:
76:6a:1b:1a:96:ea:f9:ec:14:ad:2e:9c:68:d7:6e:
c4:c2:13:6f:d7:40:da:bd:0a:53:da:be:44:f7:9e:
44:f7:ed:99:d4:a8:ed:b6:7c:d2:76:94:1c:ff:b8:
d2:47:22:d7:cd:3b:f6:a2:57:ab:49:f5:a7:f4:fa:
d5:3a:59:c3:eb:0a:65:b1:32:66:d0:79:5f:7a:a7:
cc:d2:17:9c:dc:98:46:86:69:9d:04:cc:c3:e6:68:
bf:df:43:97:cb:a7:72:aa:13:08:31:61:38:3b:eb:
15:c0:f6:03:29:37:87:67:88:1f:66:38:f5:95:8b:
5d:01:24:11:01:68:a1:d0:19:57:fb:f9:63:5a:e4:
ae:6f:58:62:da:61:29:22:15:6d:15:cf:27:7c:fa:
c1:6a:92:a1:3e:b2:34:53:58:6a:2f:f6:2d:ba:90:
2a:f7:85:99:3c:b8:49:c6:f3:de:28:dc:bb:9b:11:
9e:2a:53:1d:52:66:40:38:5c:ef:48:ef:4f:2d:28:
50:d4:fe:04:2c:3c:56:c8:51:d2:32:61:86:55:cc:
f6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CF:EA:EF:C4:08:68:0D:06:62:C3:9F:DD:99:F8:CD:31:10:61:73
X509v3 Authority Key Identifier:
keyid:64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:36:9d:48:b6:1e:12:1a:62:a6:d3:02:92:df:51:e2:91:19:
88:4a:04:a2:5a:10:2f:16:77:55:b6:49:9c:f1:b3:ea:ad:ae:
b0:9c:63:d0:d9:18:4e:71:ad:7a:96:63:b4:9a:f4:ad:4c:c9:
0d:2e:b2:9b:62:e1:da:72:f5:0c:8e:df:9d:63:08:60:3c:6e:
90:c2:8f:ca:43:34:e7:5a:79:f5:ef:4a:c5:f5:b0:14:72:83:
4b:6b:f1:59:85:c0:b5:a6:97:96:be:27:97:bb:b9:68:bd:26:
c4:58:36:98:ec:9b:af:cc:32:7b:e9:6b:d3:aa:ab:dd:25:0f:
e7:0b:28:cd:2f:81:88:c1:6a:05:cd:33:df:d9:32:cb:4e:14:
ac:c8:50:df:b0:b1:06:9f:7d:4a:61:a5:8e:60:f4:bd:a0:1b:
5a:30:42:87:ad:53:ab:37:10:a7:34:a6:cd:c8:a9:62:f5:b0:
80:76:ed:85:fe:f1:98:16:3c:e0:fa:22:7f:e7:92:20:c2:08:
50:b4:9d:94:06:c5:5f:98:f5:be:19:14:66:35:e6:3b:58:1c:
d5:84:bf:aa:a9:7f:9a:50:04:71:79:0d:02:72:b9:db:3c:b1:
c8:a9:6f:6c:89:f4:54:57:b6:d3:38:fa:fb:6a:1a:18:c3:a5:
fd:d3:18:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:37:00 2026 by rpki-client